Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
maxLevel7
minLevel1

Summary

Overall ClinSpark User permissions are managed within the User Profile and cover 3 levels:

  • A Role/Roles are to be assigned to User(s)

  • In case of a multi-site customer, users can be restricted to certain Sites only

  • Users can be restricted to certain Studies only

Default Settings

A newly created User will have no Study and Site restrictions assigned. This means they will have access to all Studies and Sites by default.

Additionally, new New users will have no assigned Roles. To be able to log into ClinSpark, users need at least one Role assigned to their User Profile. Their User Role(s) will allow them to perform access certain areas and functions based on the assigned Role Actions within ClinSpark.

Restrict User Access to specific Sites

To restrict .

A newly created User will also have no Study and/or Site restrictions applied. For certain use cases this may be desirable, especially within early phase workflows. However it’s often necessary to apply additional restrictions to certain sites and studies.

There are some approaches you can consider in managing “default” user access (setting up new users) for Studies and Sites.

  • Allow access to all Studies and Sites, then further refine with restrictions on user profile

  • Prevent access by enforcing that at least one study or site be restricted on user profile

Requiring study and/or site restrictions for users can be controlled with the “Require restrictions” settings in the User Profile:

...

When the “Require study restrictions?” setting is enabled for a User, they must have at least one study restricted to their profile in order to log in and access the system. This setting enforces a check done at login. Without any studies restricted to their profile, they will be unable to login.

...

When the “Require site restrictions?” settings is disabled for a User, they will have access to features and data for all sites at login. However if this setting is enabled, they will only be able to access sites unless you restrict access them to specific Sites via their profile.

Image Added

Manage User Access to specific Sites

You can use the “Restricted Sites” section in a User Profile to manage user access to Sites.

...

If the “Require Site Restrictions?” setting is disabled for the User, leaving the “Restricted Sites” section blank will give the User access to all Sites. If the “Require Site Restrictions?” setting is enabled for the User, you must add at least one Site that the User should have access to.

To manage User Access per Site:

  1. To restrict allow User access using the User Profile settings, go to Administration > Users, search for the desired User and click on their name to access their User Profile.

  2. In the “Sites” section, click the green “Add” button.

  3. Select the desired Site from the dropdown and tick the “Recruitment Restriction?” tickbox for User who will only perform recruitment-related actions within the Site.

  4. Click “Save” to continue.

  5. Repeat this for each Site that the User should have access to.

...

Manage User Access to

...

Studies

To restrict manage User Access to Studies, you can user use their User Profile settings or a study specific User Access module (Study > Configure > User Access).

...

Info

Remember that the “Require study restrictions?” setting on a user profile is intended to check if the user is able to access studies at login. If this setting is enabled, and the user has no study restrictions, they will not be able to login.

Using the User Profile settings to restrict access

This is the most common method for restricting users to specific studies.

  1. To restrict User access using the User Profile settings, go to Administration > Users, search for the desired User and click on their name to access their User Profile.

  2. In the “Restricted Studies” section, click the green “Add” button.

  3. Select the desired Study from the dropdown and click “Save” to continue.

  4. Repeat this for each Study that the User should have access to.

...

Using the Study Specific Controls to restrict access

For customers that need to be able to control User have more fine-grained controls for user permissions on a per-Study level, there is a feature in Study > Configure > User Access to support this need. This Study specific User access layer

Note

If you are considering using the study specific ‘User Access’ features, please consider the following:

  • A specific Role Action “Study User Management” enables users to access the ‘User Access’ controls to manage study specific restrictions. With this Role Action, the User would not need to be explicitly added to the Study in question, as they can access all studies in the system to use these features.

  • The study specific ‘User Access’ feature set works cumulative to the overall user permissions defined in

...

  • a given user’s profile, but the study specific settings will take priority. In other words, study specific ‘User Access’ definition will supersede a user’s specific study access restrictions present in their profile.

...

Note that this feature set is opt-in per study, so it is typically used when needing to define and enforce very specific user and role configurations for a given study.

  1. Image Removed

    To restrict User access using the Study Configure modulestudy specific controls, select the desired Study in the Study selection dropdown at the top of the page.

  2. Click on the “Study” menu and select “Configure”.

  3. Scroll down to the section “User Access” and click on it to open the configuration optionsNavigate to Study > Configure > User Access section.

  4. Click on the “Action” menu and select “Import”. The “Import Study Users” screen will open.

    Image Added
  5. To search for the Users, you will need to apply the Site filter. All Users belonging to the Site will appear in a list.

  6. Search for Users to import & manage by applying the “Site” and “Role” filters. For example: if a User has multiple Roles, but they had only been trained for some of them for this specific Study, apply the “Role(s)” filter and only add them for each specific Role that they had already been trained for. You can add other Roles for the User later on.

    Image Added
  7. Select the “Users Active” tickbox to mark them as active on the Study immediately. Leave the tickbox unchecked, if you wish to “activate” them later.

    Image Added
  8. Select all of the Users who are authorized to access the Study information from the list, by ticking the appropriate tickboxes.

    Image Added
  9. Click “Save”. Users list will be populated in the “User Access” section. They will be able to perform all of their Roles (as configured in their User Profile) within this Study. You can always come back and Import more users, Edit or Delete the User Access using the “Action” menu.

...

  1. Please note how in this example, the User Roles are Data Collector and QC Nurse, but they had only been added to this Study as “Data Collector”:

    Image Added

You can later on modify one or more user’s specific status and role(s) in the study using the Action menu:

  • Import additional Users

  • Activate/Deactivate selected Users. Note only users that are flagged ‘Active’ can access the study.

  • Add/Remove Roles for selected Users

  • Remove users from study access

...

User Access Hierarchy

Study specific settings will supersede specific User Profile Settings. This means:

  1. User has access to a Study in their User Profile, but they are not added to the list of authorized users in the Study Configure module = User will not have access to the Study.

  2. User has access to Study A in their User Profile (no additional restrictions are defined in Study Configure) and access to Study B on the Study Configure module = User will have access to Studies A and B.

Restrict User Roles for a specific Study

You can further restrict a user’s role within any given Study by using the Study Configure module. This could mean that the User has Roles X, Y and Z in their User Profile, but for Study A you wish to restrict them to just Roles X and Y.

  1. To restrict User Roles for a Study, select the Study A from the Study dropdown at the top of the page.

  2. Click on the “Study” menu, then select “Configure”.

  3. Scroll down to the “User Access” section.

  4. From the “Action” menu, select the “Import” option.

  5. Select the desired Role(s) from the dropdown (Site filter is optional). A list of Users with the selected Role(s) (as configured in their User Profile) will be displayed. You cannot assign any new Roles to the User using the Study Configure module.

  6. Select all of the Users you wish to grant access for by ticking the appropriate tickboxes.

  7. Click “Save”. The Users will be added to the authorized Users list and restricted to the Role you have selected.

If you are considering using the Study Configure module to restrict User Roles for Users, please consider the following:

...

  1. .